CVSS 3.1
6.1 mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:NCVE-2024-47801
Medium (6.1) in sharp. EPSS 0.4% chance of exploitation in the next 30 days.
Sharp and Toshiba Tec MFPs improperly process query parameters in HTTP requests, resulting in a reflected cross-site scripting vulnerability.
Accessing a crafted URL which points to an affected product may cause malicious script executed on the web browser.
Severity
- EPSS
- 0.4% chance of exploitation in the next 30 days; higher than 29% of CVEs (scores of 2026-10-31)
- CWE
- CWE-79
- Published
- Modified
- Record from
- the NVD, synced
Affected
- sharp:bp-30c25_firmware
- sharp:bp-30c25t_firmware
- sharp:bp-30c25y_firmware
- sharp:bp-30c25z_firmware
- sharp:bp-30m28_firmware
- sharp:bp-30m28t_firmware
- sharp:bp-30m31_firmware
- sharp:bp-30m31t_firmware
- sharp:bp-30m35_firmware
- sharp:bp-30m35t_firmware
- sharp:bp-50c26_firmware
- sharp:bp-50c31_firmware
- sharp:bp-50c36_firmware
- sharp:bp-50c45_firmware
- sharp:bp-50c55_firmware
- sharp:bp-50c65_firmware
- sharp:bp-50m26_firmware
- sharp:bp-50m31_firmware
- sharp:bp-50m36_firmware
- sharp:bp-50m45_firmware
- sharp:bp-50m50_firmware
- sharp:bp-50m55_firmware
- sharp:bp-55c26_firmware
- sharp:bp-60c31_firmware
- sharp:bp-60c36_firmware
- sharp:bp-60c45_firmware
- sharp:bp-70c31_firmware
- sharp:bp-70c36_firmware
- sharp:bp-70c45_firmware
- sharp:bp-70c55_firmware
- sharp:bp-70c65_firmware
- sharp:bp-70m31_firmware
- sharp:bp-70m36_firmware
- sharp:bp-70m45_firmware
- sharp:bp-70m55_firmware
- sharp:bp-70m65_firmware
- sharp:bp-70m75_firmware
- sharp:bp-70m90_firmware
- sharp:bp-90c70_firmware
- sharp:bp-90c80_firmware
- sharp:bp-b537wr_firmware
- sharp:bp-b540wr_firmware
- sharp:bp-b547wd_firmware
- sharp:bp-b550wd_firmware
- sharp:bp-c533wd_firmware
- sharp:bp-c533wr_firmware
- sharp:bp-c535wd_firmware
- sharp:bp-c535wr_firmware
- sharp:bp-c542wd_firmware
- sharp:bp-c545wd_firmware